"Insider involvement" was responsible for more losses than outside hacking

While Middle Market and smaller companies accounted for 71% of claims, they were responsible for only about a third of records exposed. While smaller companies may be more prone to data breaches, they typically house less records.

The per-record cost of response for the last two years has been in the range of $955 to $965.

*Although there are different definitions of Middle Market, for the purposes of this post, I used the $50 million to $2 billion in annual revenues definition.